天美视频 BoR: Audit Committee, Nov. 29, 2023
I. CALL TO ORDER
Chair Cox called the Audit Committee meeting to order on November 29, 2023 at 2:31 P.M. EST. The roll was called, and a quorum was established.
Attendance
Chair Russell Cox (Present)
Vice Chair Keith Hamilton (Present)
Mr. Chris Girdler (Absent)
Mr. Joe Heerdink (Present)
Ms. Layah Hodges (Present)
Dr. Patsy Jackson (Present)
Ms. Candace McGraw (Present)
Mr. James Lee Stevens (Absent)
Mr. Barry Martin (Present)
II. APPROVAL OF MINUTES
Minutes were approved without objection.
III. ACTION: REVISIONS TO 天美视频 BOARD OF REGENTS AUDIT COMMITTEE CHARTER AND 天美视频 BOARD OF REGENTS BYLAWS
The proposed revisions will go to the full board of regents next week.
The revisions to the Audit Committee Charter will: 1) remove the two external members from the Audit Committee, and 2) move forward with solely members that are appointed and elected Regents.
The bylaw revisions will: 1) note the change to the makeup of the Audit Committee, and 2) due to a change in the law expulsions and suspensions for students no longer need to come before the Board of Regents.
Motion made by Regent Martin to approve the revisions to the 天美视频 Board of Regents Audit Committee Charter and the 天美视频 Board of Regents Bylaws. Regent Heerdink seconded the motion. The motion passed unanimously.
IV. Internal Audit For Fiscal Year 2023-2024
Lance Mann and Christopher Boylan from DeanDorton presented the Internal Audit for Fiscal Year 2023-2024. They conducted business office audits at Bluegrass Community and Technical College and Gateway Community and Technical College. These were both clean audits.
The IT review included the System Office, the Elizabethtown campus, and the Hazard campus. There were a few recommendations: 1) recommend 天美视频 consider creating a CISO role to be responsible for continuing to improve the security program and ensure progress made so far is maintained, 2) recommend 天美视频 implement a process that the System Office and all colleges review the configuration templates in configuration manager at least annually and document that the reviews were performed, 3) recommend that 天美视频 develop a change management policy addressing systems that are not managed by TPSP鈥檚, and 4) recommend 天美视频 conduct an annual review of SOC reports for all critical third party service providers to review their security controls to ensure vendors are meeting 天美视频 expectations.
In the area of IT - Critical Process Resiliency there were some observations highlighted.
The Action Plan has one follow-up detail: 天美视频 will implement a policy covering Conflicts of Interest for employees in financial positions (due April 2024).
V. Next Meeting
Next meeting will be scheduled before the March 2024 Board of Regents Meeting.
VI. ADJOURNMENT
Motion made by Vice Chair Hamilton to adjourn. Seconded by Regent Heerdink. Motion passed by consensus.